Connect-CMS Improper Authorization Vulnerability in Page Content Retrieval Allowing Information Disclosure

An improper authorization vulnerability has been identified in Connect-CMS, a content management system. This issue affects versions 1.x prior to 1.41.0 and 2.x prior to 2.41.0. The vulnerability arises from insufficient authorization checks in the page content retrieval feature, which may allow unauthorized access to non-public information. Exploitation of this vulnerability could result in the disclosure of content and attachments from private pages to third parties.

Impact

Exploitation of this vulnerability could lead to unauthorized retrieval of content and attachments from non-public pages.

Remediation

Users should update to version 1.41.1 or later for the 1.x series, and to version 2.41.1 or later for the 2.x series.